A flaw in macOS entitlements allows a local application to trigger unexpected system termination, resulting in a denial of service. The vulnerability emerges when entitlement checks are missing, enabling an application to perform privileged functions that can crash the operating system. An attacker could leverage this by embedding malicious code in an otherwise legitimate application.

Apple macOS products are affected, specifically any builds of macOS Sequoia earlier than 15.3, macOS Sonoma earlier than 14.7.3, and macOS Ventura earlier than 13.7.3. The flaw resides in the platform’s entitlement validation, so all affected Apple devices running these versions are at risk.

The CVSS score of 6.5 indicates moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be local, requiring the presence of a malicious or compromised application on the device. Exploitation would not grant further privileges beyond causing system termination; however, the disruption could be significant in enterprise or mission‑critical environments.